Episode 93 -- The New Browser Wars: Why the Enterprise Browser Has Become Cybersecurity’s Next Battleground

In this episode, Dr. Dave Chatterjee speaks with Anupam Upadhyay, Senior Vice President, Product Management, Palo Alto Networks, a seasoned product and cybersecurity leader, to unpack the “new browser wars” and why enterprise browsers are fast becoming a core battleground in the fight for digital trust. Drawing on over two decades of experience spanning Cisco, startups, and Palo Alto, Upadhyay traces the evolution of the humble browser from a passive content viewer into the primary interface for cloud applications, collaboration tools, and sensitive business data.

The conversation examines the browser’s expanding role as both a productivity hub and a primary attack vector—accounting for over 90 percent of initial intrusions via phishing, malicious extensions, or session hijacking. Through the lens of the Commitment-Preparedness-Discipline (CPD) Framework, Dr. Chatterjee and Anupam Upadhyay emphasize that securing the enterprise browser is not merely a technical exercise but a governance imperative: leadership commitment to zero-trust principles, preparedness through hardened configurations and employee training, and disciplined enforcement of consistent controls across devices and partners.

Time Stamps

• 00:49 — Dave’s introduction and guest overview.

• 03:00 — Anupam Upadhyay’s career journey and reinvention at Palo Alto Networks.

• 05:00 — Historical context: how browsers stayed outside the security spotlight.

• 08:40 — Cloud and SaaS migration shifting business to the browser.

• 11:20 — Emerging browser threats and data sanctity concerns.

• 14:30 — Malicious extensions and the limits of traditional EDR.

• 16:07 — Browser security as part of Zero Trust architecture.

• 18:30 — Balancing security and user experience.

• 22:10 — Operating in hostile environments and credential revocation.

• 25:00 — Dr. Chatterjee introduces the CPD framework for governance.

• 28:45 — Implementation and user adoption challenges.

• 30:00 — Continuous testing and discipline in browser security.

• 33:05 — Closing takeaways on Zero Trust mindset and defense-in-depth.

To access and download the entire podcast summary with discussion highlights -

Connect with Host Dr. Dave Chatterjee

LinkedIn: https://www.linkedin.com/in/dchatte/

Website: https://dchatte.com/

Books Published

The DeepFake Conspiracy

Cybersecurity Readiness: A Holistic and High-Performance Approach

Articles Published

Ramasastry, C. and Chatterjee, D. (2025). Trusona: Recruiting For The Hacker Mindset, Ivey Publishing, Oct 3, 2025.

Chatterjee, D. and Leslie, A. (2024). “Ignorance is not bliss: A human-centered whole-of-enterprise approach to cybersecurity preparedness,” Business Horizons, Accepted on Oct 29, 2024.

Isik, O., Chatterjee, D., and Lourenco,...